admin c393d8529a R-856: after a crash boot of the host, app mails wait ~15 minutes; a normal boot keeps 90 s (09 decision 143) ...

The dead-app check (source of app_start_failed and app_stopped_unhealthy) now gates on a crash-aware
boot grace (internal/crashboot): 15 min when the host crash guard's last boot was UNCLEAN and within
30 min of the controller start, otherwise 90 s. The fact is read from the agent's local API
(GET /host/crash-guard, agentapi.Client.CrashGuard). UNKNOWN - no agent, an older agent's 404, no
crash-guard state - is a normal boot. The decision is logged once ("boot grace ...: ... (R-856)").

NEEDS AN AGENT CHANGE to take effect: GET /host/crash-guard serving the guard's state.json fields
(present, last_boot_at, last_boot_unclean, tripped). Until then every box keeps 90 s.

Tests: TestR856_CrashBootHoldsTheMailsForTheLongGrace, TestR856_NormalBootKeeps90s,
TestR856_FactReadLateInTheNormalGraceStillCounts, TestR856_AgentProbeReadsTheCrashGuardState,
TestR856_CrashGuardDecodesAndAnOlderAgentIs404, TestR856_DeadAppCheckWaitsOnTheCrashAwareGrace,
TestR856_NormalGraceIsTheDeadAppBootGrace.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-06 11:39:25 +02:00

..

agentapi

R-856: after a crash boot of the host, app mails wait ~15 minutes; a normal boot keeps 90 s (09 decision 143)

2026-10-06 11:39:25 +02:00

api

R-575: the overcommit warning follows the reader's language

2026-10-05 23:12:59 +02:00

appbackup

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

appexport

v0.294.0: off-site clean-up guard follows the policy's own constants (R-867); no image clean-up while compose pulls (R-863); stderr tail (R-864); move-aside destination logged (R-869)

2026-10-05 07:13:02 +02:00

assets

…

backup

R-645: the night backup skips an app whose pinned version is not the one it runs (09 decision 142)

2026-10-06 11:39:25 +02:00

backupwindow

v0.279.0: after_install (decision 45), known default logins on the page, Part D empty-backup alarm, night chain (R-705), R-706

2026-09-28 18:38:30 +02:00

bootrecon

controller v0.242.0: a removed app is listed with its kept backup; five small ones (R-487 R-491 R-490 R-489 R-476 R-456)

2026-09-13 22:50:18 +02:00

bootstrap

R-270: the local_api drift detector also names a TOKEN-only divergence

2026-10-05 23:12:59 +02:00

channelhealth

R-271: the channel recovery after a controller restart is reported

2026-10-05 21:55:37 +02:00

cloudflare

…

config

R-492: delete the always-empty cfg.Paths.HDDPath (field, env binding, every fallback)

2026-10-05 22:24:22 +02:00

crashboot

R-856: after a crash boot of the host, app mails wait ~15 minutes; a normal boot keeps 90 s (09 decision 143)

2026-10-06 11:39:25 +02:00

crypto

…

dockerexec

v0.294.0: off-site clean-up guard follows the policy's own constants (R-867); no image clean-up while compose pulls (R-863); stderr tail (R-864); move-aside destination logged (R-869)

2026-10-05 07:13:02 +02:00

family

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

fillwatch

kept data: the choice at reinstall, the list, the read-only view, the load (09 decision 36); R-690 fixed

2026-09-25 13:32:30 +02:00

i18n

R-645: the night backup skips an app whose pinned version is not the one it runs (09 decision 142)

2026-10-06 11:39:25 +02:00

infra

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

integrations

controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true

2026-09-23 20:25:28 +02:00

logx

…

mailrelay

…

metrics

v0.295.0: a box that was off at its backup time catches up once (R-871, decision 109); the missed-backup banner (decision 110); a late daily timer after a host suspend is skipped

2026-10-05 09:27:16 +02:00

monitor

R-516 items 7-10: one banner per drive, local times, te-form, health banners in the household's language

2026-10-06 02:01:12 +02:00

nightchain

v0.295.0: a box that was off at its backup time catches up once (R-871, decision 109); the missed-backup banner (decision 110); a late daily timer after a host suspend is skipped

2026-10-05 09:27:16 +02:00

notify

R-585: the last customer-facing producers follow the household's language

2026-10-06 02:01:12 +02:00

offsiteapply

v0.290.0: the clean-up guard skips same-day superseded young snapshots instead of refusing (R-824), refuses above the weekly cap; a due set-aside deletion is handed to the hub's 7-day wait (decision 74, R-823)

2026-10-04 07:27:38 +02:00

quiesce

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

recovery

…

report

R-492: delete the always-empty cfg.Paths.HDDPath (field, env binding, every fallback)

2026-10-05 22:24:22 +02:00

scheduler

v0.295.0: a box that was off at its backup time catches up once (R-871, decision 109); the missed-backup banner (decision 110); a late daily timer after a host suspend is skipped

2026-10-05 09:27:16 +02:00

selftest

controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true

2026-09-23 20:25:28 +02:00

selfupdate

v0.285.0 — a box keeps two controller versions (decision 56, R-745); the update clean-up's nil-stack crash (R-751)

2026-10-01 07:36:26 +02:00

settings

R-492: delete the always-empty cfg.Paths.HDDPath (field, env binding, every fallback)

2026-10-05 22:24:22 +02:00

setup

controller v0.271.0: automatic app updates — the update leg after the off-site copy, the backup gate waits, the switch (09 6.4 part 7; R-680, R-678, R-643)

2026-09-24 22:07:24 +02:00

sockheal

v0.293.0: the controller heals itself after the guest's Docker socket is re-created (R-860)

2026-10-04 19:48:29 +02:00

stacks

R-645: the night backup skips an app whose pinned version is not the one it runs (09 decision 142)

2026-10-06 11:39:25 +02:00

sync

R-616 (on top of R-615): the catalog clone stores no credentials

2026-10-05 23:12:59 +02:00

system

R-889: every disk percent is df's (used / (used + available)); the tile says Rendszer, not Rendszer (/) (09 decision 138)

2026-10-06 08:03:21 +02:00

util

v0.254.0 — the saved notes follow the language, and the switch becomes a globe (R-557 slice 2 release C; SLICE 2 CLOSED)

2026-09-18 14:19:31 +02:00

web

R-645: the night backup skips an app whose pinned version is not the one it runs (09 decision 142)

2026-10-06 11:39:25 +02:00